Telegram Bot

Create and manage Telegram bots. Use when user wants to build a Telegram bot for notifications, automation, customer support, group management, or interactiv...

This skill appears to do what it says, but take these precautions before running it: - Keep your Telegram bot token secret and pass it only to trusted environments; treat it like a password. - The script will attempt to pip-install python-telegram-bot at runtime using os.system — run it inside a virtual environment or container to avoid polluting system Python and to review the package version. - The --handler option imports and executes whatever Python file you point it to; do not use untrusted handler files (they can run arbitrary code, access files, or send data). Review handler code before running. - If you use webhook mode, ensure your webhook endpoint is secure (HTTPS) and exposed only as needed. - Because the skill's source/homepage is unknown, prefer running it in an isolated environment until you've audited the code and any runtime installations.

Type: OpenClaw Skill Name: telegram-bot-pro Version: 1.0.0 The skill bundle provides a framework for Telegram bots but includes high-risk execution patterns. Specifically, `scripts/bot.py` uses `os.system` to automatically install dependencies and employs dynamic module loading (`__import__`) to execute code from user-specified handler files. While these features are aligned with the stated purpose of creating a customizable bot, they represent significant security risks (potential for arbitrary code execution) that warrant a suspicious classification under the provided guidelines.